OverTheWire - Natas

Natas, a CTF-like wargame offered by the OverTheWire community, teaches the basics of server-side web application security. It covers many of OWASP Top Ten Web Application Security Risks. This series of writeups will walk through Natas solutions.

Posts

25 Sep 2021
Natas33 - PHP Phar Deserialization Vulnerabilities
19 Sep 2021
Natas32 - RCE and Privilege Escalation
17 Sep 2021
Natas31 - RCE (Remote Code Execution)
29 Aug 2021
Natas30 - SQL Injection in Perl CGI
17 Aug 2021
Natas29 - Vulnerability of open() in Perl
13 Aug 2021
Natas28 - Broken cryptography and SQL injection
07 Aug 2021
Natas27 - Trailing spaces for varchar in MYSQL
31 Jul 2021
Natas26 - Insecure Deserialization
25 Jul 2021
Natas25 - Local File Inclusion and Code Injection
19 Jul 2021
Natas24 - Vulnerability of strcmp()
12 Jul 2021
Natas23 - Comparing string and integer in PHP
12 Jul 2021
Natas22 - HTTP Redirect
02 Jul 2021
Natas21 - Session Management Part 4
21 May 2021
Natas20 - Session Management Part 3
23 Apr 2021
Natas19 - Improper Session Management Part 2
16 Apr 2021
Natas18 - Improper Session Management Part 1
05 Apr 2021
Natas17 - SQL Injection Part 3 (Timing-based Injection)
29 Mar 2021
Natas16 - Command Injection Part 3
26 Mar 2021
Natas15 - SQL Injection Part 2 (Blind SQL Injection)
21 Mar 2021
Natas14 - SQL Injection Part 1
15 Mar 2021
Natas13 - Code Injection Part 2
08 Mar 2021
Natas12 - Code Injection Part 1
27 Feb 2021
Natas11 - Broken Cryptography
20 Feb 2021
Natas10 - Command Injection Part 2
10 Feb 2021
Natas9 - Command Injection Part 1
07 Feb 2021
Natas8 - Info Disclosure and Reverse
29 Jan 2021
Natas7 - File Inclusion Vulnerability
19 Jan 2021
Natas6 - Data Exposure
13 Jan 2021
Natas5 - HTTP Cookie
09 Jan 2021
Natas4 - HTTP Referer
07 Jan 2021
Natas3 - robots.txt
25 Dec 2020
Natas2 - Directory Indexing Vulnerability
23 Dec 2020
Natas0 And Natas1 Solution